Re:Alexa shows private Wyze Cam feed to stranger [video]
by mistersys on Saturday June 01, 2019 @06:57PM
(#20072264)
Heh.. I'm glad they resolved the issue quickly but this seems like bad security design, whenever a camera is associated with a new account they should have totally new encryption keys so the old account is locked out regardless of leftover information hanging out in Alexa. Not great to hear from a company with thousands+ of cameras streaming 24/7.
[ Parent
| on HN ]
Re:Alexa shows private Wyze Cam feed to stranger [video]
by ttul on Saturday June 01, 2019 @08:13PM
(#20072623)
This was my thought. Someone didn’t design this system with security and privacy in mind at the outset.
Re:Alexa shows private Wyze Cam feed to stranger [video]
by munchbunny on Saturday June 01, 2019 @08:32PM
(#20072684)
Definitely agreed about making something like designing an encryption key per user account type of mechanism to force an error instead of a privacy violation.
GDPR requires this sort of "security and privacy by design" practice, but it's going to be a long time before there's any real widespread knowledge of how to do it, because it's actually really hard to do. I know developers who don't really understand that this principle goes beyond just 2fa and password best practices.